CVE-2021-28208: medium-severity vulnerability in ASUS BMC firmware for ASMB9-iKVM
ASUS BMC's firmware: path traversal - Get video file function
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in ASUS BMC's web interface allows an authenticated administrator to access files outside the intended directory using path traversal. An attacker with admin credentials can bypass directory restrictions and read sensitive system files.
The 'Get video file' function in ASUS BMC's web management page fails to sanitize user-supplied path parameters, enabling path traversal attacks (CWE-22). An authenticated attacker with administrator privileges can craft malicious requests containing traversal sequences (../) to access arbitrary system files beyond the intended video directory.
In the same product, most dangerous first.